Skip to content

chore: update dependencies and actions#140

Merged
95gabor merged 3 commits into
mainfrom
cursor/update-dependencies-actions-3a00
Jun 21, 2026
Merged

chore: update dependencies and actions#140
95gabor merged 3 commits into
mainfrom
cursor/update-dependencies-actions-3a00

Conversation

@95gabor

@95gabor 95gabor commented Jun 21, 2026

Copy link
Copy Markdown
Owner

Summary

  • Update Nuxt/Vue/tooling dependencies within the existing caret version style
  • Refresh package-lock.json and apply non-forced audit remediation where safe
  • Update GitHub workflow checkout actions from v6 to v7
  • Update Docker base images within the existing exact Alpine tag style (node:26.3.1-alpine3.23, nginx:1.31.2-alpine3.23-slim)
  • Adjust Lighthouse PR comment helper for the updated ESLint rule behavior

Validation

  • npm ci (Node 26.3.1)
  • npm audit --json (5 residual findings: Storybook addon-actions/uuid, root esbuild transitive, and npm-bundled undici)
  • npm run lint
  • npm run typecheck
  • npm run generate (passes; existing CSS @apply syntax warnings are emitted during build)
  • docker build -t cv:dependency-docker-update . (blocked locally: docker CLI is not installed in this cloud image)

Notes

  • Held @percy/cli at the existing ^1.31.14 range/1.31.14 lockfile resolution because 1.32.2 introduces a current fast-xml-parser audit finding.
  • Held vue-router at ^5.0.7 because 5.1.0 conflicts with the current Vite/Storybook 8 resolution path.
  • Did not take Storybook 10 because the matching 10.x package set is not available for the configured addon package names; forcing audit remediation would downgrade/break the Storybook addon chain.
  • Remaining high audit finding is npm 11.17.0's bundled undici 6.x dependency, which is not fixable from this repo without an upstream npm release.
Open in Web Open in Cursor 

Co-authored-by: Gábor Pichner <95gabor@gmail.com>
@coderabbitai

coderabbitai Bot commented Jun 21, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@95gabor, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 51 minutes and 57 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, the refill rate gradually slows as usage increases. The highest same-day bursts are limited more strictly.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: d789022a-39cb-4fad-afb0-b2858fbe5e3c

📥 Commits

Reviewing files that changed from the base of the PR and between 615dad6 and aaea66b.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (6)
  • .github/scripts/ci/lighthouse/build-comment-body.js
  • .github/workflows/ci.yaml
  • .github/workflows/publish.yaml
  • .github/workflows/release.yaml
  • Dockerfile
  • package.json
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch cursor/update-dependencies-actions-3a00

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions

github-actions Bot commented Jun 21, 2026

Copy link
Copy Markdown

Lighthouse results

URL Performance Accessibility Best Practices SEO
http://127.0.0.1:4173/ 54% 99% 96% 100%

Updated automatically by CI.

@95gabor 95gabor marked this pull request as ready for review June 21, 2026 10:15
github-actions Bot added a commit that referenced this pull request Jun 21, 2026
@github-actions

Copy link
Copy Markdown

Latest full-page screenshot

Full-page PR screenshot

@95gabor 95gabor merged commit 4faeabe into main Jun 21, 2026
23 of 31 checks passed
@95gabor 95gabor deleted the cursor/update-dependencies-actions-3a00 branch June 21, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants